This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/LDyfR2ZtnYNbloHwNFDlP56jAsw.roa File: LDyfR2ZtnYNbloHwNFDlP56jAsw.roa (raw, json) Hash identifier: inTNdVNnUzE3++ozBBAiNTKzryuD+atj6L3dBuSWD7I= Subject key identifier: 2C:3C:9F:47:66:6D:9D:83:5B:96:81:F0:34:50:E5:3F:9E:A3:02:CC Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Certificate serial: 019B7AC899AD9CDE727027D4E78506976FAA Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/LDyfR2ZtnYNbloHwNFDlP56jAsw.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203443 IP address blocks: 185.134.48.0/22 maxlen: 22 2a07:6800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:99:ad:9c:de:72:70:27:d4:e7:85:06:97:6f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3c9f47666d9d835b9681f03450e53f9ea302cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:2b:f5:e9:2e:57:57:c5:55:ee:53:43:77: 7a:e0:09:b6:76:ad:e6:cc:a1:af:bb:8e:4a:b3:47: d0:48:ed:31:91:01:d0:60:65:f3:72:3a:37:05:b4: ec:13:6e:80:06:93:d4:d7:8d:3a:2f:a6:c2:9c:b4: 27:06:a6:d4:63:b6:03:64:01:2f:4e:1a:85:e0:33: 16:18:94:c4:f5:86:f0:49:6a:1c:83:9e:a1:c7:74: 39:16:6f:31:5a:b6:09:85:ff:9d:b3:14:dd:82:04: 02:bc:a2:a7:83:9c:b2:66:21:a9:9e:eb:42:ec:50: 9d:f8:9d:25:81:44:25:6e:9b:06:7e:40:bb:8d:f6: 41:32:4a:d3:0f:53:60:1b:fa:a1:cd:bf:61:ba:80: fe:26:b5:39:17:04:84:0b:85:98:bf:d0:4a:05:21: e0:9e:47:fe:fa:73:cd:21:5b:3f:da:89:35:d4:50: 5b:ea:7b:05:a9:5a:bd:c8:e1:f1:a9:ea:1a:04:3d: 69:40:dd:bf:d8:0a:cf:a5:f3:c9:20:80:37:ad:eb: 93:56:93:6f:a0:44:63:91:07:fa:0f:14:51:57:ac: 51:69:be:0d:6b:a7:da:05:b6:50:39:b4:5f:f9:9e: d2:e6:0b:85:25:bc:ee:b4:7d:00:a9:61:4f:64:f4: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:9F:47:66:6D:9D:83:5B:96:81:F0:34:50:E5:3F:9E:A3:02:CC X509v3 Authority Key Identifier: keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/LDyfR2ZtnYNbloHwNFDlP56jAsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.48.0/22 IPv6: 2a07:6800::/29 Signature Algorithm: sha256WithRSAEncryption ac:83:9c:1f:af:08:67:cb:2a:76:dc:c8:b5:3d:3b:3b:07:e6: c5:96:c5:90:e8:a4:05:e9:81:94:ab:a6:11:21:ba:e1:da:6e: 7b:f2:11:88:66:0e:c1:68:6c:ed:82:e7:bb:ac:7c:ea:e6:41: fd:69:d9:55:58:d7:49:db:08:80:b4:78:e7:e3:0f:5e:ea:f5: c4:51:6f:48:8c:41:ce:31:f8:2c:e1:46:fe:15:af:3c:e2:15: ba:26:26:59:9e:d4:0c:41:3a:75:38:38:cc:01:e1:16:ba:f1: 5c:6f:47:69:59:6e:4e:9b:4e:19:fd:be:ae:98:e3:0c:34:4a: 34:6d:74:7e:98:e6:68:b8:41:7a:ad:2e:55:4d:27:5f:26:c5: de:94:84:1c:91:ae:1d:df:8e:b8:3b:1c:02:29:35:bf:b1:4d: dd:a7:c3:0b:31:fd:c5:8f:d5:b3:65:39:56:80:33:83:03:6e: 73:9a:f6:81:2b:ae:59:bc:a4:ff:52:a6:a0:d1:b5:50:fb:2e: bf:73:c1:40:d5:57:11:ce:62:db:e7:ff:77:ad:c8:5c:9a:1e: bf:ab:de:98:6a:d6:f4:7f:e2:e7:ae:b9:22:bf:11:71:eb:61: da:54:63:e7:a7:87:0c:97:6c:95:b9:06:42:70:05:77:12:c1: e9:58:78:53 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yJmtnN5ycCfU54UGl2+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDQxMjk1M2FjMDZhN2M1MmNiMjY3OTZmODgwNmIxYmI4 NTk2MTcwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzNjOWY0NzY2NmQ5ZDgzNWI5NjgxZjAzNDUwZTUzZjllYTMwMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqUr9ekuV1fFVe5TQ3d64Am2dq3m zKGvu45Ks0fQSO0xkQHQYGXzcjo3BbTsE26ABpPU1406L6bCnLQnBqbUY7YDZAEv ThqF4DMWGJTE9YbwSWocg56hx3Q5Fm8xWrYJhf+dsxTdggQCvKKng5yyZiGpnutC 7FCd+J0lgUQlbpsGfkC7jfZBMkrTD1NgG/qhzb9huoD+JrU5FwSEC4WYv9BKBSHg nkf++nPNIVs/2ok11FBb6nsFqVq9yOHxqeoaBD1pQN2/2ArPpfPJIIA3reuTVpNv oERjkQf6DxRRV6xRab4Na6faBbZQObRf+Z7S5guFJbzutH0AqWFPZPRa/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCw8n0dmbZ2DW5aB8DRQ5T+eowLMMB8GA1UdIwQY MBaAFPXUEpU6wGp8UssmeW+IBrG7hZYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEt NzlkNTJkYzY2OTI2LzEvTER5ZlIyWnRuWU5ibG9Id05GRGxQNTZqQXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEtNzlkNTJkYzY2OTI2 LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYYwMA0E AgACMAcDBQMqB2gAMA0GCSqGSIb3DQEBCwUAA4IBAQCsg5wfrwhnyyp23Mi1PTs7 B+bFlsWQ6KQF6YGUq6YRIbrh2m578hGIZg7BaGztgue7rHzq5kH9adlVWNdJ2wiA tHjn4w9e6vXEUW9IjEHOMfgs4Ub+Fa884hW6JiZZntQMQTp1ODjMAeEWuvFcb0dp WW5Om04Z/b6umOMMNEo0bXR+mOZouEF6rS5VTSdfJsXelIQcka4d3464OxwCKTW/ sU3dp8MLMf3Fj9WzZTlWgDODA25zmvaBK65ZvKT/Uqag0bVQ+y6/c8FA1VcRzmLb 5/93rchcmh6/q96Yatb0f+LnrrkivxFx62HaVGPnp4cMl2yVuQZCcAV3EsHpWHhT -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:38 2026 by rpki-client